DID YOU KNOW...
Frost and Sullivan announced in their Feb. 2007 report, "Analysis of Vulnerability Discovery and Disclosure", that TippingPoint was the fastest growing discoverer of new vulnerabilities and the leader in the discovery of both high-severity and Microsoft vulnerabilities.

Announcing Private Beta
Just a quick announcement that Brandon and I will be speaking at Hackito Ergo Sum next week on some of our team's use of IDA. We'll be releasing a private beta (capped at 25 users) of our team's Toolbag code after the talk. For now, you can read our documentation on the ...

I. Introduction
We often receive fuzzed file submissions, which at times can be agonizing to analyze. Tools help a lot here, as we have shown in previous posts, such as with Peter's awesome write up on hooking ReadFile and MapViewOfFile. This post approaches the same idea of hooking ReadFile for fuzz file analysis, but uses programmatic debugging to hook ReadFile and inspect the input instead of hot patching (hooking is not really the right term to use here, but we will ...